Privacy Policy

This Privacy Policy explains what personal information DigiPass collects, why we collect it, and the choices you have over your data. We are committed to collecting only what we need to deliver and support your orders.

We collect the following categories of information:

• Account data: name, email address, and password (hashed) when you register
• Order data: products purchased, payment method, transaction reference, and delivery details
• Contact data: messages you send via our contact form or support tickets
• Usage data: pages visited, device type, and approximate location derived from IP

We use the information we collect to:

• Process payments and deliver licenses to you
• Provide customer support and resolve order issues
• Send order confirmations, refund notices, and service announcements
• Detect and prevent fraud, chargebacks, and abuse of our platform
• Improve our products and the overall shopping experience

We never sell your personal information to third parties.

Where required (for example under GDPR), we process your data on the following bases: performance of a contract (to fulfil your order), legitimate interests (security and fraud prevention), and your consent (for optional marketing communications, which you can withdraw at any time).

We share data only with the service providers we rely on to operate: payment processors, email delivery, and hosting. Each is bound by contractual obligations to protect your data and to use it only for the purpose we engage them for.

We may disclose information where required by law or to protect our rights, customers, or the public from harm.

We keep your account and order data for as long as your account is active, and for a reasonable period afterward to handle disputes, comply with legal obligations, and maintain records for tax and audit purposes.

Transaction records are typically retained for up to 7 years as required by financial regulations.

We use industry-standard measures to protect your data, including encrypted transmission (TLS), hashed passwords, and restricted internal access. No method of transmission or storage is fully secure, but we work hard to safeguard your information.

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Request deletion of your data, subject to legal retention duties
• Object to or restrict certain processing
• Receive a portable copy of your data
• Withdraw consent for optional processing at any time

To exercise any of these rights, contact us through the contact form on our About page.

We use a minimal set of cookies to keep you signed in and to understand aggregate usage. See our separate Cookies Policy for details and controls.

DigiPass is not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us data, contact us and we will delete it.

We may update this policy from time to time. Material changes will be reflected in the "last updated" date above and, where significant, communicated by email.